Limited administrator with read-only rights cannot remotely run commands on groups in the SEPM